The Compliance as Code project focuses on the automatic security configuration of Linux-based systems aimed at security policy compliance by creating security profiles that can be utilized by the OpenSCAP tool. However, almost all existing profiles target servers and enterprise systems. This thesis, therefore, aims at creating a reasonable security profile for standard end-user systems, balancing security and usability aspects.

In this thesis, the student will:

1. Understand the motivation for automatically checking security policy compliance and look into the OpenSCAP and Compliance as Code projects.
2. Review multiple existing security policies, with a particular focus on Configuration recommendations of a GNU/Linux system by ANSSI, RHEL 8 Security Technical Implementation Guide by DISA and RHEL 8 Benchmark by CIS.
3. Based on existing policies, devise a new security policy for end users applicable to the Fedora workstation.
4. Implement the suggested security policy as a profile inside the Compliance as Code project, aiming for a production-ready code that can be directly upstreamed into the Fedora operating system.